> an ISP would want to observe the traffic themselves My ISP didn't, when they got access logs from a service I attacked as a teenager and asked me to explain

> an ISP would want to observe the traffic themselves My ISP didn't, when they got access logs from a service I attacked as a teenager and asked me to explain that to get the connection unblocked Idk, at the moment we're simply not even trying to set a standard. Maybe it would work reasonably well when the ISP needs to observe the traffic and, after a few days of the initial report, they observe a netflow that matches a new abuse report. Even if we set low standards, currently, too few people are sending abuse notifications instead of just sticking it behind the great internet vetting service and calling it good > maybe they'll contact the customer, but maybe they'll just sit on it. That's the core point no? If they don't care about their abusive traffic, nullroute their ranges. If admins consistently do that, the abuse has to stop or the ISP goes out of business